Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers to spoof the Grandstream provisioning server via a crafted certificate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Grandstream Wave app for Android 安全漏洞
Vulnerability Description
Grandstream Wave app for Android是美国潮流网络（Grandstream）公司的一套免费的用于Android系统的网络电话应用程序。该应用程序支持多账户、多线路同时使用等。 基于Android平台的Grandstream Wave 1.0.1.26之前的版本中的com.softphone.common package存在安全漏洞，该漏洞源于程序没有正确的验证SSL证书。攻击者可借助特制的证书利用该漏洞实施中间人攻击，冒充信任的Grandstream provisioning服
CVSS Information
N/A
Vulnerability Type
N/A